$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed9f108-f0c7-3142-902c-df61a40adce5.roa File: 8ed9f108-f0c7-3142-902c-df61a40adce5.roa (raw, json) Hash identifier: asN9CfVAHtzqQxSPfm7bHj+sWyb0rofTvrBEsO9wM3Y= Subject key identifier: 25:26:8D:0E:14:86:C3:37:35:3A:AC:6C:3E:46:DA:1F:C5:35:EA:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFC1BFC99779A6106BBEFE680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed9f108-f0c7-3142-902c-df61a40adce5.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2d81:100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fc:99:77:9a:61:06:bb:ef:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=699d9eb7-3895-464a-bf26-8f214e6d3b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:01:21:ad:26:c2:d9:a0:bf:71:11:75:bc: e5:1f:2c:8a:f8:32:5b:be:db:5d:3d:52:60:29:c5: 64:50:21:9d:ef:bf:8d:f8:3d:68:4c:bf:59:5a:64: ea:88:25:7a:b4:ba:b0:63:ec:10:1a:79:0d:98:dc: 0a:85:ff:5a:a3:e6:2e:24:95:10:17:8a:81:84:44: 01:14:27:f1:69:62:7a:8d:65:09:af:cd:c5:68:73: fa:9c:88:88:08:f4:0b:11:48:c2:cb:48:43:bd:7a: 3e:ab:cf:ea:b7:6a:9e:44:c1:74:ea:8a:7e:40:fd: 87:e6:73:20:c7:c6:10:4a:95:c7:aa:8b:db:de:c4: 4c:fb:2f:df:83:65:71:8b:dd:09:f1:1f:94:9c:28: 5e:2c:57:e6:e9:cb:66:b3:dc:b7:bf:2a:8e:ae:bd: 41:64:d8:c0:3c:fa:93:80:82:44:80:54:91:5f:9d: a0:60:8d:91:e8:28:36:c8:56:a5:5c:c5:ec:a1:8e: 8c:06:68:e9:60:16:26:e9:8d:9b:19:19:4d:73:24: 3a:cc:f9:c6:79:11:d6:79:e3:4a:a1:e7:57:a1:32: a4:69:8f:d2:c3:91:c8:ac:89:d7:2f:5f:86:d4:80: 14:25:4b:9e:a7:e1:95:4b:da:05:f0:84:4e:3f:ef: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:8D:0E:14:86:C3:37:35:3A:AC:6C:3E:46:DA:1F:C5:35:EA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed9f108-f0c7-3142-902c-df61a40adce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:73:f4:2f:cf:39:eb:b1:1d:a0:9a:4b:0b:51:ad:be:1d:87: 38:5e:02:71:a7:93:ee:5e:a1:2f:a6:eb:a7:52:5b:af:93:2b: cb:0d:e6:fd:f4:2d:a5:29:b7:81:d7:3f:f9:4a:fe:be:98:4b: d3:0a:40:3a:9f:f9:21:de:5c:b9:55:ff:22:c5:d3:cb:92:f4: 3c:c3:36:7a:51:cc:3c:32:b5:3f:87:b1:dc:ee:8b:7b:a1:ea: 39:6e:8b:50:ad:80:b4:55:86:7c:36:91:59:53:34:15:57:21: c9:08:65:c3:64:7b:b8:99:c9:34:a8:26:75:08:e5:f8:ab:70: cc:2f:35:f1:fa:37:3c:9b:6a:a8:5a:20:35:c6:3d:57:86:36: 02:90:81:a7:fc:a4:32:f6:31:33:eb:f7:47:a2:6a:22:69:50: 78:85:7d:96:b6:91:ed:e8:10:12:71:23:fd:c7:bf:26:b4:51: 4f:9e:c0:b4:4d:f5:be:70:db:4a:81:e2:45:1d:da:4b:54:46: 3c:62:c8:74:a9:56:b1:69:78:77:06:4f:04:c3:92:26:12:13: ac:3f:73:63:2a:12:33:36:35:ae:71:fd:d9:e1:ec:a0:25:08: 61:11:7e:42:60:75:b9:cb:26:13:49:2f:39:af:78:54:65:33: 01:18:6e:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/yZd5phBrvv5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk Njk5ZDllYjctMzg5NS00NjRhLWJmMjYtOGYyMTRlNmQzYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKEBIa0mwtmgv3ERdbzlHyyK+DJbvttdPVJg KcVkUCGd77+N+D1oTL9ZWmTqiCV6tLqwY+wQGnkNmNwKhf9ao+YuJJUQF4qBhEQB FCfxaWJ6jWUJr83FaHP6nIiICPQLEUjCy0hDvXo+q8/qt2qeRMF06op+QP2H5nMg x8YQSpXHqovb3sRM+y/fg2Vxi90J8R+UnCheLFfm6ctms9y3vyqOrr1BZNjAPPqT gIJEgFSRX52gYI2R6Cg2yFalXMXsoY6MBmjpYBYm6Y2bGRlNcyQ6zPnGeRHWeeNK oedXoTKkaY/Sw5HIrInXL1+G1IAUJUuep+GVS9oF8IROP++UKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUmjQ4UhsM3NTqsbD5G2h/FNerhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGVkOWYxMDgtZjBjNy0z MTQyLTkwMmMtZGY2MWE0MGFkY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9z9C/POeuxHaCaSwtRrb4dhzheAnGnk+5eoS+m66dSW6+TK8sN 5v30LaUpt4HXP/lK/r6YS9MKQDqf+SHeXLlV/yLF08uS9DzDNnpRzDwytT+Hsdzu i3uh6jlui1CtgLRVhnw2kVlTNBVXIckIZcNke7iZyTSoJnUI5fircMwvNfH6Nzyb aqhaIDXGPVeGNgKQgaf8pDL2MTPr90eiaiJpUHiFfZa2ke3oEBJxI/3Hvya0UU+e wLRN9b5w20qB4kUd2ktURjxiyHSpVrFpeHcGTwTDkiYSE6w/c2MqEjM2Na5x/dnh 7KAlCGERfkJgdbnLJhNJLzmveFRlMwEYboY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:09 2025 by rpki-client